Attackers exploit open source package registries by injecting malicious code into abandoned or compromised projects to launch software supply chain attacks.

Authors

• Person: Not available Organization: Sonatype
  Open Source Software: What is OSS? - Sonatype

Sources

• Open Source Software: What is OSS? - Sonatype www.sonatype.com Sonatype via serper

Referenced by nodes (1)

• supply chain attacks concept